AFL Persistent Fuzzing Mode

Added 1 commit:

• dd42d9b9 - Add support for AFL Persistent Fuzzing Mode

Added 1 commit:

• 6a40db84 - Add support for AFL Persistent Fuzzing Mode

Added 1 commit:

• 90d8114f - Fix typo KNOTD_AFL_* -> KNOT_AFL_*

Added 1 commit:

• 322f3986 - Add support for AFL Persistent Fuzzing Mode based on work by Jonathan Foote jfoote@fastly.com

Title changed from Add support for AFL Persistent Fuzzing Mode to [WIP] Add support for AFL Persistent Fuzzing Mode

Reassigned to @vkriz

So I moved the AFL_PERSISTENT mode to tests-fuzz/packet.c and we need to add one more test to tests-fuzz that will test the rest of the Knot DNS processing code.

The basic idea of the moment is to prepare a variants of _udp_init, _udp_recv, _udp_handle, ... that will read packet from stdin and _udp_send that will raise(SIGSTOP) or exit (based on getenv("AFL_PERSISTENT")).

We will have to duplicate some of the initialization from udp_master() and correctly initialize the rest of the structures, but it should be as simple as doing:

#include <knot/server/udp-handler.c>

int main() {
      _udp_init = udp_fuzz_init;
      _udp_handle = udp_fuzz_handle;
      _udp_recv = udp_fuzz_recv;
      _udp_send = udp_send_recv;
      [...]
      /* initialize fake thread and it's data structures */

      udp_master(thread);

}

mentioned in issue #349 (closed)

Added 1 commit:

• e436100d - afl-persistent: wrap udp with stdio. #349 (closed)

Added 1 commit:

• bf7aa8d6 - Remove extra logging from packet fuzzing main loop

Added 2 commits:

• 84586e8e - Add information about two types of fuzzing tests into FUZZING readme
• 0bac39b2 - Fixing the loose ends and nit picking

Added 2 commits:

• ab9b6f4b - afl-persistent: gpl headers
• fc78476f - afl-persistent: cannibalize tcp_master

Added 2 commits:

• 19a77fb8 - Add more stuff into sample knot.conf
• e4a6d61b - Remove some debugging output from udp-wrap.c

Added 1 commit:

• e256c369 - afl: fix read length

Title changed from [WIP] Add support for AFL Persistent Fuzzing Mode to AFL Persistent Fuzzing Mode

Added 2 commits:

• 6f7d2cad - afl: handle empty input
• 24af659a - afl: getenv call only once

Added 1 commit:

• 0d5383e5 - afl: getenv call only once

Added 2 commits:

• 26e6f441 - tests-fuzz: compile with make check
• ca49426e - tests-fuzz: add missing binary to gitignore

Status changed to merged